Hacker News .hnnew | past | comments | ask | show | jobs | submit | pca's commentslogin

Doesn't Microsoft use a thousand different domains, most of which look sketchy? What if you receive an email from microsofts-support@live.com? Could you immediately tell that it is not legitimate compared to, e.g. contact@microsoftsupport.com?


My favorite:

aka.ms

Or “cudaserv.com”, which is auto enabled link scanning for Office365


I think a standalone "Hello World", built with .NET Core, is around 60-70 MB large on both Linux and Windows. The startup times are alright - slower on Windows than on Linux in my experience because of the file system performance.


Lower than this. If I use the AOT compile option with .NET Core 3.1 I get a 40MB binary which goes down to 10MB with the trim option.

Just like Go which embed it’s runtime, .NET Core binary compiled with AOT embed the CLR but, unlike Go, it has options to trim out the pieces that aren’t necessary, which I really like.


I did not know about PublishTrimmed and will try it out. Thank you.


I think this is one of those features that was a bit preview in 5 and you should use the just-released v6 for PublishTrimmed. There are also situations where it doesn't work out of the box (e.g. Winui3!)


> I think a standalone "Hello World", built with .NET Core, is around 60-70 MB large on both Linux and Windows.

Lol what?

What goes into a 70 MB implementation of 'hello world'?


It’s not a 70 MB implementation of Hello world. It’s a 70 MB compressed runtime with a standard library (or at least the most basic parts of it) and a couple KB "Hello world".


Why is the runtime so huge and why is so much of the standard library included?

Java ‘hello world’ compiled into a static binary is just a couple of MB.


The runtime is huge because it includes a very large standard library. Using the .NET linker you can create a "trimmed" binary that only includes the code that actually gets used. A Hello World compiled this way takes 14MiB "Ready to Run" with native code included, or 11MiB without.

For a modern CLI app it's basically that easy. For an older or GUI WPF app it's not. It used to be fashionable in .NET to use lots of runtime reflection, dynamic runtime configuration based on config files, dynamic loading, and runtime code generation. I suppose the language was less featureful back then and people looked longingly at Enterprise Java for some reason. This type of dynamism doesn't work with AOT compilation because the compiler needs to be able to statically determine what code is required. The solution is to remove the dynamism, replace it with compile-time code generation, or annotate the reflection to tell the compiler which types will actually be used. As of .NET 6 most of the standard library has been annotated or otherwise made compatible with trimming[0]. WPF apps will probably never be able to use trimming because that's a huge amount of code and MS has like one intern working on it.

I believe the situation with Java is basically the same? You can't just build a Java 6 Spring app into a small AOT bundle, right?

[0]: https://themesof.net/roadmap?product=.NET&release=6.0&q=trim


See PublishTrimmed: by default it includes all the standard library. "Trimming" is what almost all C-style linkers do by default, but C# doesn't because there are some reflection issues (e.g. you can reference types by strings and construct them at runtime, which would fail in a Trimmed environment unless you explicitly tell it not to trim those types).


Can this couple MB static binary run without JRE?


Well it wouldn't be very 'static' if it couldn't, so yes of course.


Could you point me to where I can learn how to do it?


If you use legacy .NET (which is preinstalled on Windows) a GUI Hello World is about 10 kB.


Same, except I used Chrome's classic colours: https://addons.mozilla.org/en-US/firefox/addon/familiar-blue...

The only thing I'm really missing is how easily you can set up and switch between different profiles in Chrome.


There used to be an extension that made profile handling aboutvas easy as in Chrome.


Signal-Desktop works even when your phone is turned off.


I did the same thing, and yet every couple of years some of those deleted items reappear on the news feed of my second account that I only use to double-check my privacy settings.

It's an European account and I'm wondering if only marking the content as deleted, instead of actually deleting it, violates the GDPR.


Can you report that to the privacy regulator in your European country? The "mark as deleted" versus actual deletion is an important distinction. I can't do anything as a non-European...


I was planning on looking into how to best document it the next time it happens, and whom exactly to report it to (i.e. the national or European data protection authority). Not sure if there is anything else I could do.


If you revoke location permissions, Google still guesses it accurately, for me at least, "from your search history", as it says at the bottom of the search results page - even when you're not signed in (screenshot: https://imgur.com/a/wU8EZUA). I wouldn't mind if they just used the IP address to locate me, but why use the search history? If I wanted Google to know my exact location, I wouldn't have revoked the permissions for it.


It's more of a notification than a question dialogue. It tells you that Windows 10 is a "recommended update" now (instead of optional which it was before). That means no matter how you close the window, now you'll get the update unless you actively disable it in time.


How many of the hundreds of millions of people using Windows computers are affected like this that don't have someone tech-savy to ask for help? There's no possible way Microsoft didn't think of this scenario, which can only mean that they simply do not care.


I am certainly in agreement. From what I can see they used social engineering for a few months, then dark patterned it so users would install. (Im referring to users being slowly trained to close the window saying upgrade, then that same click agreeing and installing).

Which in my opinion is exactly that. Social engineering to get them use to it (same action over and over), and dark pattern (doing something do so they would agree to something they didn't necessarily want to).

Very scummy in my opinion. I wish I could change but I am very much stuck on Windows (my only product uses windows voice recognition engine. . . .I don't have the knowledge to wrote my own).

Edit: typo


As long as changes and 'upgrades' correlate with net gains for investors and shareholders, it's all good. It's all that matters. We are faced with faceless super-agents, we can't realistically complain to anyone, nobody is responsible. I hope the era of user empowerment comes soon, and this kind of mammoth-sized digital stomping over humans ends.


Oh... They surely care! For the upgrade rate, which historically was always very low.


Thanks for the warning. I'm not sure if they're being sleazy or just unthoughtful and incompetent. I already lost an afternoon with family, which I don't get to see that often, because I was forced to fix things that went wrong on their devices after the unexpected update. I had told them to "Just click the red x for now,if a message about Windows 10 pops up".


I think they'll bring it back in the summer, but didn't find a more recent source than this: https://www.thurrott.com/cloud/microsoft-consumer-services/o...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: